Resource assignment reports
The resource assignment reports show information pertaining to resource assignments. A resource assignment represents the assignment of a specific resource to a specific account or identity. The resource assignment reports are most often accessed from account, identity and resource reports.
WEN001 Resource assignment list
This report lists resource assignments in a system with information on validity and approval state.
info
The report can only be accessed from System details report.
WEN001 fields
| Field | Description |
|---|---|
| Color icon | Left side color coding indicates compliance status. If the Role and Policy Engine is not used, the color icon shows approval state. Red indicates rejected or not attested; green indicates approved. This field links to the Resource assignment details report. |
| Account | The account the resource assignment is for. This field links to the Account details report. |
| Account source | The system that contains the account. |
| Resource | The name of the resource the identity has an assignment to. This field links to the Resource details report. |
| Type | Account type. Shows whether the account is a personal account or not. |
| Status | Status of the resource assignment. |
| Compliance status | Shows the compliance status as calculated by the Omada Identity Role and Policy Engine. The possible values are: Explicitly Approved Implicitly Approved Not Approved Orphan Assignment Pending Deprovisioning In Violation Implicitly Assigned None |
| Reason | Shows the reason for the resource assignment, as calculated in the Role and Policy Engine. If the Role and Policy Engine is not used the Reason field indicates if the resource assignment is implicit or explicit. An implicit resource assignment is associated with an identity through a reference, for example a context assignment.Assignments to resources that are child resources are also implicit resource assignments. |
WEN001 parameters
| Parameter | Description |
|---|---|
| Effective time (required) | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
| Max. items (required) | The maximum number of returned items. By default, this parameter is set to 100 items. Change to view more results. |
| Account | Use the Account parameter to search for a resource assignment for a particular account.This searches the account column. Supports wildcards. |
| Resource | Use the Resource parameter to search for a resource assignment for a particular resource. This searches the resource column.Supports wildcards. |
| Identity | Use the Identity parameter to search for a specific identity. This searches the Unique ID column. Supports wildcards. |
| Category | Category of the resource assignment |
| Classification Status | Classification of the resource. This can have (one or more) of the values System administration, Business Critical, Privileged access or Unknown. |
WEN002 Resource assignment detail
This reports shows the details of a resource assignment including resource and account.
info
The report is generally accessed from any report that has an approval state color coding box. The resource assignment details report can also be accessed from the resource assignment change log reports.
WEN002 fields
| Parameter | Description |
|---|---|
| Resource | The resource the resource assignment is for. This field links to the Resource details report. |
| Account | The account the resource assignment is for. This field links to the Account details report. |
| Status | Status of the resource assignment. |
| Valid from | The date the resource assignment is valid from. |
| Valid to | The date the resource assignment is valid to. |
| Indirect | A resource assignment can be either direct or indirect. An indirect resource assignment is associated with an identity through a reference. Assignments to resources that are child resources are also indirect resource assignments. |
| Description | Resource assignment description. |
| Compliance status | Shows the compliance status as calculated by the Omada Identity Role and Policy Engine. The possible values are: Explicitly Approved Implicitly Approved Not Approved Orphan Assignment Pending Deprovisioning In Violation Implicitly Assigned None |
| Target resource | If the resource assignment targets another resource assignment of a different account, this is the targeted resource assignment. For example, if one account’s resource assignment is “User mailbox”, and another account is granted access to this mailbox using the resource assignment “Send on behalf of”, the target resource is “User mailbox”. |
| Target account | If the resource assignment targets another resource assignment of a different account, this is the targeted account. For example, if one account’s resource assignment is “User mailbox”, and another account is granted access to this mailbox using the resource assignment “Send on behalf of”, the target account is the one with the original “User mailbox” resource assignment. |
WEN002 parameters
| Parameter | Description |
|---|---|
| Effective time (required) | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
WEN003 Resource assignments pending
This report lists resource assignments that have been revoked in attestation but not yet removed in the source system.
info
The report can only be accessed from System details report.
WEN003 fields
| Field | Description |
|---|---|
| Account | The account the resource assignment is for. This field links to the Account details report. |
| Account source | The system that contains the account. |
| Resource | The name of the resource the identity has an assignment to. This field links to the Resource details report. |
| Status | Status of the resource assignment. |
| Reason | Shows the reason for the resource assignment, as calculated in the Role and Policy Engine. If the Role and Policy Engine is not used the Reason field indicates if the resource assignment is implicit or explicit. An implicit resource assignment is associated with an identity through a reference, for example a context assignment. Assignments to resources that are child resources are also implicit resource assignments. |
WEN003 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
| Max. items | The maximum number of returned items. By default this parameter is set to 100 items. Change to view more results. |
| Account | Use the Account parameter to search for a resource assignment for a particular account. This searches the account column. Supports wildcards. |
| Resource | Use the Resource parameter to search for a resource assignment for a particular resource. This searches the resource column. Supports wildcards. |